PT-2025-4408 · Gutentor · Gutentor

Name of the Vulnerable Software and Affected Versions: Gutentor versions prior to 3.4.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the...

PT-2025-4540 · WordPress · Wp Github

Name of the Vulnerable Software and Affected Versions: WP Github versions 1.3.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...

TUBITAK BILGEM Pardus OS My Computer 操作系统命令注入漏洞

TUBITAK BILGEM Pardus OS My Computer is a UI from TUBITAK BILGEM for information and management of disks on a computer. An operating system command injection vulnerability exists in TUBITAK BILGEM Pardus OS My Computer versions prior to 0.7.2, which stems from improper neutralization of special...

PT-2025-3252 · Unknown · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg versions prior to 3.7.3.3 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations: For versions prior to...

Directory Traversal

Gogs is vulnerable to Directory Traversal. The vulnerability is due to improper input handling that allows a malicious user to write a file to an arbitrary path on the server, potentially gaining SSH access...

PT-2025-3179 · Unknown · 10Centmail

Name of the Vulnerable Software and Affected Versions: 10CentMail versions n/a through 2.1.50 Description: The issue affects 10CentMail, allowing Reflected XSS due to improper neutralization of input during web page generation. This flaw enables Cross-site Scripting attacks. Recommendations: For...

WordPress plugin Custom Dashboard Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin ConvertCalculator for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin User Referral 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Easy Language Switcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin 10CentMail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-3169 · Unknown · Gavin Rehkemper Inline Footnotes

Name of the Vulnerable Software and Affected Versions: Gavin Rehkemper Inline Footnotes versions prior to 2.3.0 Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This enables attackers to inject maliciou...

PT-2025-3190 · Azzaroco · Azzaroco Wp Superbackup

Name of the Vulnerable Software and Affected Versions: Azzaroco WP SuperBackup versions 2.3.3 and earlier Description: The issue affects Azzaroco WP SuperBackup, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables an attacker to inject malicious...

WordPress plugin Leads CRM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-3226 · Unknown · Gs Plugins Project Showcase

Name of the Vulnerable Software and Affected Versions: GS Plugins Project Showcase versions 1.1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS vulnerability. This allows for Stored XSS...

WordPress plugin Arconix Shortcodes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-3216 · Unknown · Gregross Just Writing Statistics

Name of the Vulnerable Software and Affected Versions: GregRoss Just Writing Statistics versions n/a through 4.7 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, which can...

WordPress plugin WP eCommerce Quickpay 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

PT-2025-1000

Name of the Vulnerable Software and Affected Versions ASUS AiCloud affected versions not specified Description An improper input insertion issue exists in AiCloud on certain ASUS router models. This can allow a remote attacker to execute arbitrary commands. The issue involves a failure to properl...

WordPress plugin Simple Proxy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...